Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.mft
File:                     kiFKkNQJX9JnZcwOTfiZ6MRsBt8.mft (raw, json)
Hash identifier:          EDHlDZsxE0o+L4b1qKZWNt/1GrsP88jpTcRhWkwLW4c=
Subject key identifier:   45:C0:DF:98:F2:9B:89:B3:5A:42:C5:06:E9:AA:32:39:C6:AC:F0:01
Authority key identifier: 92:21:4A:90:D4:09:5F:D2:67:65:CC:0E:4D:F8:99:E8:C4:6C:06:DF
Certificate issuer:       /CN=92214a90d4095fd26765cc0e4df899e8c46c06df
Certificate serial:       01974A7ACD430C0E6E624F56570E433FEDCD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.mft
Manifest number:          1279
Signing time:             Sat 07 Jun 2025 13:00:51 +0000
Manifest this update:     Sat 07 Jun 2025 13:00:51 +0000
Manifest next update:     Sun 08 Jun 2025 13:00:51 +0000
Files and hashes:         1: CXJP9kYgvGSt4VoYKuQPShczMME.roa (hash: gqOSApFpGsIytyW52e0emdHCeVR15916QBJkj7VrVD8=)
                          2: kiFKkNQJX9JnZcwOTfiZ6MRsBt8.crl (hash: sovPdb8i5uVzTvXu1ajpU9KaQjayzlCsNUnJ4E6kdK4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:7a:cd:43:0c:0e:6e:62:4f:56:57:0e:43:3f:ed:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92214a90d4095fd26765cc0e4df899e8c46c06df
        Validity
            Not Before: Jun  7 13:00:51 2025 GMT
            Not After : Jun  8 13:00:51 2025 GMT
        Subject: CN=45c0df98f29b89b35a42c506e9aa3239c6acf001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:9a:c4:7d:5c:16:24:32:f6:09:b4:91:70:be:
                    02:42:6c:e7:ef:00:ca:32:44:c5:5b:1a:2f:3f:b5:
                    49:60:25:ae:3f:f3:61:b3:35:a4:ed:33:df:a3:96:
                    03:3c:3e:47:d9:02:a6:62:d5:2a:58:e0:4d:d1:26:
                    62:aa:d9:14:b2:82:28:4c:b2:fd:7a:6f:a9:7a:3a:
                    e5:94:c5:6f:12:5f:43:2a:ad:9d:27:6f:00:f3:d1:
                    18:f4:b0:57:21:2a:48:36:06:66:99:cc:f0:87:bc:
                    b6:38:e6:c1:26:e3:ba:24:69:38:ef:4d:3c:b4:04:
                    64:ec:13:36:00:41:67:50:4a:07:23:87:b0:3c:62:
                    1f:56:08:b6:5e:be:0c:12:31:f2:82:cf:73:b0:4b:
                    98:a1:e6:5b:a9:d0:60:0d:9c:28:51:92:ba:51:4d:
                    26:7e:69:0b:94:43:dd:33:b1:bd:8a:a2:8b:cc:a7:
                    ff:ef:3d:49:e2:1b:07:5d:58:71:be:00:f7:91:9a:
                    7b:b4:09:27:b4:5b:15:70:4e:9f:11:10:5a:85:0f:
                    bf:ae:15:84:53:5c:fa:45:65:15:0e:c6:46:ec:ad:
                    a6:c4:83:6e:51:0f:b3:eb:33:c3:f5:7e:50:f5:1c:
                    7a:49:cc:fd:71:06:c6:bf:d2:11:f7:92:bd:fc:21:
                    ff:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:C0:DF:98:F2:9B:89:B3:5A:42:C5:06:E9:AA:32:39:C6:AC:F0:01
            X509v3 Authority Key Identifier:
                keyid:92:21:4A:90:D4:09:5F:D2:67:65:CC:0E:4D:F8:99:E8:C4:6C:06:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:4e:c2:9b:a5:fc:24:f1:a2:5a:8b:35:96:98:36:27:74:f9:
         34:d5:e0:88:33:a9:da:65:2d:81:b4:c8:2b:da:4a:ff:1a:28:
         c7:ab:f7:43:2b:8f:8e:d8:e3:71:05:54:62:e5:82:95:e8:18:
         96:0a:47:6d:6a:7d:4c:4e:d5:04:1f:58:fd:f8:ef:3b:11:c9:
         bd:5a:d4:db:01:e6:96:8b:79:13:9c:26:17:3f:61:b2:55:a1:
         35:0b:83:19:7f:9b:1b:36:c6:59:99:c4:72:d1:e4:f1:33:a5:
         99:e0:6b:f3:58:7a:35:88:42:5f:c1:66:cd:1a:9e:12:bc:07:
         d0:b8:db:d8:99:57:7d:9e:c0:3f:fa:25:62:72:dd:92:37:31:
         8f:89:6c:f6:ed:f3:8c:55:6b:4c:d8:5e:f1:46:40:6f:b3:f6:
         72:fa:0d:3c:4f:63:44:67:78:ef:bd:4d:e9:e7:f4:a4:b4:5b:
         96:dd:3f:fc:62:ac:c8:34:c8:bc:90:db:b3:08:22:02:2a:20:
         08:4c:27:3a:7e:b4:5d:4d:54:2d:c3:ba:ec:ac:81:d4:35:c5:
         3e:87:ad:5e:c0:c9:5a:b9:ad:c1:15:4f:52:c8:c0:fb:9b:32:
         6a:09:d0:a0:27:1f:d1:21:f4:6c:3c:d7:de:ac:9f:5a:b7:c3:
         ec:b0:80:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:27:25 2025 by rpki-client